General

  • Target

    00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68

  • Size

    212KB

  • Sample

    240404-wns57sec8v

  • MD5

    2236937c6350dc13d760df72041a11eb

  • SHA1

    18855107a4a1282b1542e62abd7770fa2906b34e

  • SHA256

    00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68

  • SHA512

    d158fa8f1eb768293a5c1abaa16d20ad744f763f6bff041c24c7d111b01f5c4df6054a7a1ca8a20c39835263496fc3f0ac6f2d0bba4ae7dc94c1dfcc1e03b361

  • SSDEEP

    1536:6QdH3UyOEGYf1m2wW4cd9Lv2PElgWy8NoN274B/K51UtaHElfTczpqVar1/AgAIk:hUxS1Lzp+QNoN2I0jASr2

Score
10/10

Malware Config

Targets

    • Target

      00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68

    • Size

      212KB

    • MD5

      2236937c6350dc13d760df72041a11eb

    • SHA1

      18855107a4a1282b1542e62abd7770fa2906b34e

    • SHA256

      00fe9c97f0b8de9b925a29f3f77df12c9097e3f20cc4eacb1e42f2be7d7e2c68

    • SHA512

      d158fa8f1eb768293a5c1abaa16d20ad744f763f6bff041c24c7d111b01f5c4df6054a7a1ca8a20c39835263496fc3f0ac6f2d0bba4ae7dc94c1dfcc1e03b361

    • SSDEEP

      1536:6QdH3UyOEGYf1m2wW4cd9Lv2PElgWy8NoN274B/K51UtaHElfTczpqVar1/AgAIk:hUxS1Lzp+QNoN2I0jASr2

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks